Blame extensions/libip6t_ah.txlate
|
Packit |
7b22a4 |
ip6tables-translate -A INPUT -m ah --ahspi 500 -j DROP
|
|
Packit |
7b22a4 |
nft add rule ip6 filter INPUT ah spi 500 counter drop
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ip6tables-translate -A INPUT -m ah --ahspi 500:550 -j DROP
|
|
Packit |
7b22a4 |
nft add rule ip6 filter INPUT ah spi 500-550 counter drop
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ip6tables-translate -A INPUT -m ah ! --ahlen 120
|
|
Packit |
7b22a4 |
nft add rule ip6 filter INPUT ah hdrlength != 120 counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ip6tables-translate -A INPUT -m ah --ahres
|
|
Packit |
7b22a4 |
nft add rule ip6 filter INPUT ah reserved 1 counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ip6tables-translate -A INPUT -m ah --ahspi 500 ! --ahlen 120 -j DROP
|
|
Packit |
7b22a4 |
nft add rule ip6 filter INPUT ah spi 500 ah hdrlength != 120 counter drop
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ip6tables-translate -A INPUT -m ah --ahspi 500 --ahlen 120 --ahres -j ACCEPT
|
|
Packit |
7b22a4 |
nft add rule ip6 filter INPUT ah spi 500 ah hdrlength 120 ah reserved 1 counter accept
|